Top Cybersecurity watchdog issues emergency Ivanti directive to federal agencies

nbcnews.com

18 pointscebert3 comments

So a remote work backdoor had a vulnerability and now 1700 orgs (including federal agencies) were hacked since December? Is it too soon to compare this to solarwinds? After all they were both in December

> The program used by the agencies is called Ivanti Connect Secure, which allows employees to remotely connect to work.

> As news of the vulnerability has become widespread, at least 1,700 known organizations around the world have been hacked with it, Volexity has found.

Solarwinds was a supply chain attack where the company itself was hacked first, trojanized an installer, and then let that installer released to eventually end up in the target organization. This is an exploit, not a supply chain attack in the same manner. I would not compare them.

I meant from a scale perspective not the manner

Reply on news.ycombinator.com